BOISE, ID – August 14, 2014 – AB Acquisition LLC, which operates Albertsons stores under Albertson’s LLC and ACME Markets, Jewel-Osco, and Shaw’s and Star Markets under New Albertson’s, Inc., recently learned of an unlawful intrusion to obtain credit and debit card payment information in some of its stores. The appropriate federal law enforcement authorities have been notified, and AB Acquisition is working closely with its third party IT services provider, SUPERVALU, to better understand the nature and scope of the incident. Third-party data forensics experts are supporting an ongoing investigation. AB Acquisition has not determined that any cardholder data was in fact stolen, and currently it has no evidence of any misuse of any such data.

AB Acquisition believes that the intrusion has been contained and is confident that its customers can safely use their credit and debit cards in its stores.

Based on the latest information from the ongoing investigation, it appears that the period of unauthorized access may have started on June 22, 2014 (at the earliest) and ended on July 17, 2014 (at the latest).

Based on information we have at this time, Albertsons stores in Arizona, Arkansas, Colorado, Florida, Louisiana, New Mexico, Texas and our two Super Saver Foods Stores in Northern Utah were not impacted by this incident. However, Albertsons stores in Southern California, Idaho, Montana, North Dakota, Nevada, Oregon, Washington, Wyoming and Southern Utah were impacted. In addition, ACME Markets in Pennsylvania, Maryland, Delaware and New Jersey; Jewel-Osco stores in Iowa, Illinois and Indiana; and Shaw’s and Star Markets stores in Maine, Massachusetts, Vermont, New Hampshire and Rhode Island were all impacted by this incident.

“We know our customers are concerned about the security of their payment card data, and we work hard to protect it,” said Mark Bates, Senior Vice President and Chief Information Officer at AB Acquisition LLC. “As soon as we were notified of the incident, we began working closely with SUPERVALU to determine what happened. It’s important to note that there is no evidence at this point that consumer data has been misused.”

Continued Bates, “We understand the inconvenience and concern an incident like this can cause, and we deeply regret that our customers’ data was targeted. ”

Given the continuing nature of the investigation, it is possible that time frames, locations and/or at risk data in addition to that described above will be identified in the future.

More information will be available on the websites at albertsons.com, acmemarkets.com, jewelosco.com, and shaws.com within 24 hours. Although it has not yet been determined whether any cardholder data was in fact stolen, and there is no evidence to date of any misuse of such data, AB Acquisition LLC is offering customers whose payment cards may have been affected 12 months of complimentary consumer identity protection services through AllClear ID. Customers may visit the websites listed above for further information about the incident and about complimentary consumer identity protection services being offered, or call AllClear ID at 1-855-865-4449 beginning at 2:00pm MT (4:00pm ET) on August 20, 2014.

A free copy of your credit report can also be obtained from each of the credit bureaus once a year by going to http://www.annualcreditreport.com or calling 877-322-8228. Hearing impaired consumers can access TDD services at 877-730-4104. We encourage you to monitor these reports, as well as your credit and debit card statements. You may also place a fraud alert or security freeze on your credit report by contacting the credit bureaus as listed below.

About AB Acquisition LLC

Established in 2006, AB Acquisition LLC (“Albertsons”), which operates ACME, Albertsons, Jewel-Osco, Lucky, Shaws, Star Market and Super Saver, and stores under the United Family of stores, Amigos, Market Street and United Supermarkets, is working to become the favorite food and drug retailer in every market it serves. The company is privately owned by Cerberus Capital Management, Kimco Realty Corporation, Klaff Realty, Lubert-Adler Partners, and Schottenstein Stores Corporation, and operates 1,060 stores and 14 distribution centers in 29 states and employs approximately 115,000 associates. For more information, please visit www.Albertsons.com.

A free copy of your credit report can be obtained from each of the credit bureaus once a year by going to http://www.annualcreditreport.com or calling 877-322-8228. Hearing impaired consumers can access TDD services at 877-730-4104. We encourage you to monitor these reports, as well as your credit and debit card statements. You may also place a fraud alert or security freeze on your credit report by contacting the credit bureaus as listed below.

EquifaxP.O. Box 740241Atlanta, GA 30374888-766-0008

www.equifax.com

ExperianP.O. Box 9554Allen, TX 75013888-397-3742

www.experian.com

TransUnionP.O. Box 6790Fullerton, CA 92834800-680-7289

www.transunion.com

A security freeze will prevent new credit from being opened in your name without the use of a personal identification number or password that will be issued by the credit bureaus after you initiate the freeze. A security freeze will also prevent potential creditors from accessing your credit report without your authorization. However, please be aware that placing a security freeze on your credit report may delay, interfere with, or prevent the timely approval of any requests you make for new loans, mortgages, employment, housing or other services. In order to place a security freeze, you may be required to provide the credit bureaus with information that identifies you, including your full name, social security number, date of birth, current and previous addresses, a copy of your state-issued identification card, and a recent utility bill, bank statement or insurance statement. Credit bureaus may charge a fee up to $10 to place, lift, or remove the security freeze; however, this fee may be less in certain states (in MA, up to $5) or waived if you are the victim of identity theft and you provide a valid police report. You must separately place a security freeze on your credit file with each credit reporting agency.

Filing a Police Report for Suspicious Activity:

If you do find suspicious activity on the credit or debit card indicated in our notice to you or in your credit report, call your local police or sheriff’s office and file a police report of identity theft. Get a copy of the police report. You may need to give copies of the police report to creditors to clear up your records. In addition, you should report identity theft to your Attorney General and the Federal Trade Commission.

For Maryland Residents: The Maryland Attorney General provides information regarding identity theft at http://www.oag.state.md.us/idtheft/index.htm. You may also contact the Identity Theft Unit at (410) 576-6491, by email at idtheft@oag.state.md.us, and by mail at 200 St. Paul Place, 16th Floor, Baltimore, MD 21202.

Hi Theresa, many financial institutions have fraud identification processes in place to notify card holders. We are in the process of establishing our dedicated call center which will be available after August 20th. At that time, customers may call our toll-free customer information hotline at 1-855-865-4449 and a dedicated security professional will assist you.

Great statement!! Too bad there’s NO opportunity for your customers to sign up for the complimentary consumer identity protection services being offered, “AllClear ID at 1-855-865-4449.” Calling the number gives you a recorded apology and then a dial tone. Way to go!!

Hi Clayton, We regret that we had issues with our dedicated call center number. If a problem arises with your accounts, simply call 1-855-865-4449 after Wednesday, August 20th Monday through Saturday from 8:00am-8:00pm CT and a dedicated investigator will assist you in restoring your identity to its accurate state. Additional identity protection services that includes identity theft monitoring and a $1 million identity theft insurance policy will also be available beginning Wednesday, August 20th. At that time more information about these services will be available at https://abacquisition.allclearid.com.

Thank you for your understanding and patience as we work through this process.
Chris

You should pay a year at least for credit checks instead of having the channel 3 news advertise that you are helping, all you are doing is offering something which is free anyway. I TRUSTED you. IF I cannot trust your arrangements for payment how can I trust the food and other items you sell? You can be sure of this, this comes at a time when I was launching a new business, working my fingers to the bone to grow beans, fruit and other items for self, sale and also to provide to the local food shelf. NOW with a freeze it is going to hurt my getting a loan? This is inexcusable.

Hi Patty, We understand your frustration and we deeply regret that our customers’ data was targeted. We hold the trust of our customers in the highest regard, and are committed to protecting the security of our customer’s personal data. We are working closely with SUPERVALU to implement additional security measures to reduce the likelihood that no such incident ever happens again.

While it has not been determined that any cardholder data was in fact stolen, and there is currently have no evidence of any misuse of any such data, AB Acquisition has arranged for potentially impacted customers to receive a protection plan from AllClear ID that is designed specifically for credit card incidents. This plan includes the following key identity theft protections:

1) Identity Repair – 100% of AB Acquisition customers automatically have access to licensed private investigators who will do the work to resolve any broader harm that comes to customer identities. There is no enrollment required. Investigators will resolve issues with credit cards, checking, savings and investment accounts, medical accounts, employment and criminal identity theft. AllClear ID maintains a 97% customer satisfaction rating in delivering this service.

2) Card / Account Monitoring – AllClear ID will help and advise customers to activate their existing account alerts to monitor for unauthorized transactions on their credit or debit card accounts. When existing account alerts are activated with the customer’s card issuer, customers will receive an email or text alert every time their credit card is used. This allows customers to spot fraudulent transactions immediately. AllClear ID will do the work to contact banks and merchants to reverse any fraudulent charges.

3) Identity Theft Monitoring – AllClear ID will alert customers if their credit card is reported stolen by global law enforcement agencies and security researchers. This service is unique to AllClear ID and provides early warning if the customers card is found in the wrong hands.

This coverage includes automatic protection with AllClear Secure for the next 12 months – there is no action required on your part to receive or enroll in this service. If a problem arises, simply call 1-855-865-4449 after Wednesday, August 20th Monday through Saturday from 8:00am-8:00pm CT and a dedicated investigator will assist you in restoring your identity to its accurate state. Additional identity protection services that includes identity theft monitoring and a $1 million identity theft insurance policy will also be available beginning Wednesday, August 20th. At that time more information about these services will be available at https://abacquisition.allclearid.com.

Hi Mulford & Janice, Proactively reviewing your payment card accounts is your best step. If you see unusual or suspicious activity on a payment card that you used at our store, you should immediately call the phone number on the back of that card to report it to the issuing bank. They can walk you through the steps to dispute the charges and protect your financial accounts. You can read our full FAQ here: http://www.shaws.com/recent-update/

Hi Sandra, We will be providing one year of complimentary identity protection to affected customers. This coverage includes automatic protection with AllClear Secure for the next 12 months – there is no action required on your part to receive or enroll in this service. If a problem arises, simply call 1-855-865-4449 after Wednesday, August 20th Monday through Saturday from 8:00am-8:00pm CT and a dedicated investigator will assist you in restoring your identity to its accurate state. Additional identity protection services that includes identity theft monitoring and a $1 million identity theft insurance policy will also be available beginning Wednesday, August 20th. At that time more information about these services will be available at https://abacquisition.allclearid.com.

While your honesty in this matter is appreciated. I do find your actions less than acceptable.
– you make customers wait 4 days to access a hotline with ‘more info’ (which it really isn’t more info). Unacceptable.
– any calls made to your main number prior to said numbers being available gives misleading info that often is the opposite of what other reps at that same number are telling us.
– making customers wait 5 days to access a hotline in case we feel our info has been compromised is also unacceptable.
– basically telling customers to wait for something to happen is beyond unacceptable.

As a boycotting customer of another local grocery store (due to an unjust firing of a beloved CEO) I have NO problem boycotting your store as well. Even though it will ultimately hit very hard to my wallet. I cannot assume the risk of another potential problem and sit and wait for something to happen as one of the reps at Supervalu’s incident response line implied I should do.

Stephanie, I’m sorry that you feel that way. While we understand the frustration, we needed to ensure that the agents staffing the call center were prepared to respond to our customers, and that just took time. I sincerely apologize that you feel as though our actions were insufficient. You are already protected with identity repair. No action or enrollment is required for you to be eligible for this service. I would recommend that you fill out the webform at https://abacquisition.allclearid.com/ if you want to receive additional protection (which includes identity theft insurance and identity monitoring). The email you will receive after filling out the form will have the instructions you need to enroll for those additional services. Unlike the automatic coverage, you will need to provide AllClear ID with your personal information in order to activate these additional protections. You can also call 1-855-865-4449, Monday through Saturday from 8:00am-8:00pm CT and a dedicated investigator will assist you. I hope that helps answer your questions, and I do hope you’ll reconsider shopping with us. Thank you, Christine

Hi Chris, All Shaws stores were potentially impacted by this issue, so we felt that a list wasn’t necessary. The investigation is ongoing, and as we have updates to the information, we’ll post them at http://www.shaws.com/recent-update/. Thank you,
Christine